Static task
static1
Behavioral task
behavioral1
Sample
5c07b160cfd239fce80b483c5f9aa787.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c07b160cfd239fce80b483c5f9aa787.exe
Resource
win10v2004-20231222-en
General
-
Target
5c07b160cfd239fce80b483c5f9aa787
-
Size
77KB
-
MD5
5c07b160cfd239fce80b483c5f9aa787
-
SHA1
7902ebf2588d014d2c448351c090244a135b9407
-
SHA256
c8b2ce588f1708d8561f2e0e266ca09608d4bdd57500d87960ee4af2bae93717
-
SHA512
1251b53e5bab1cc31c39dd6866d67d088aee21a06acdcbae18ea9bda653d8327679cec47cb01539741683b5f309c1932df499fa29a0a60d6aa8e3d5b06a1a826
-
SSDEEP
1536:sNMUtKwEMtLqWHrVGxmx7sQ9PCdd6BVF9BI3iWhd9QrOa5OXi+c:J9MsWHZGxm/9PCz6BTXbg+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c07b160cfd239fce80b483c5f9aa787
Files
-
5c07b160cfd239fce80b483c5f9aa787.exe windows:4 windows x86 arch:x86
f2c7b502b1e2221256ce9093dc9ae212
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
dnsapi
DnsQuery_A
ws2_32
ioctlsocket
wininet
InternetReadFile
user32
GetCursorPos
advapi32
RegCloseKey
Sections
.code Size: - Virtual size: 224KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 73KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE